This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/tjRP9kgE-QrIUhZyUs_wp0qikRA.roa File: tjRP9kgE-QrIUhZyUs_wp0qikRA.roa (raw, json) Hash identifier: 6nBakq9VtgLHGkO/ABZkQH63HrmGP7X+agXAFxco298= Subject key identifier: B6:34:4F:F6:48:04:F9:0A:C8:52:16:72:52:CF:F0:A7:4A:A2:91:10 Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Certificate serial: 019B7B36C8A75B4E2C426404EA0514178823 Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/tjRP9kgE-QrIUhZyUs_wp0qikRA.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41157 IP address blocks: 81.201.176.0/20 maxlen: 20 2a02:2218::/29 maxlen: 32 2a02:2218::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c8:a7:5b:4e:2c:42:64:04:ea:05:14:17:88:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6344ff64804f90ac852167252cff0a74aa29110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:c7:70:74:86:56:f3:9b:0f:c6:a5:31:57: 83:1a:09:2f:82:c9:69:05:bb:29:39:3e:ac:a4:73: e3:ee:d7:dc:a1:93:df:d7:e6:9b:ad:b2:dc:e6:dd: 33:9f:bd:b7:20:cd:18:56:a1:32:2a:18:6d:3f:5e: 9e:fa:d7:e7:02:72:41:e8:ac:99:81:7a:3b:94:54: 3b:61:0f:5c:77:cc:fb:b2:df:32:8d:1f:ef:28:45: 31:38:6d:40:9a:be:ab:c0:85:3a:13:b4:fc:36:70: a6:6f:19:c0:25:1b:49:04:e7:c4:09:0a:ee:86:56: 35:50:d3:4f:8a:3f:35:54:1e:80:1f:a0:68:f1:69: 92:f2:6d:2d:5b:e0:62:b0:0f:e2:34:50:6a:75:f0: d9:cc:d5:66:3e:b4:95:a5:8c:73:87:f9:13:82:74: 19:07:d5:fd:68:af:ec:18:29:4a:d9:3a:a0:52:a1: c7:2e:a2:cf:e2:77:07:55:42:95:03:09:a8:bf:b0: 4a:a7:92:50:17:6c:c8:86:bb:60:34:2b:32:fb:27: ca:87:fd:64:7b:72:d0:30:59:aa:2b:5e:e9:0a:e5: 20:92:d0:b3:b5:ce:8c:33:44:34:93:83:e1:b2:32: 8d:a8:3f:d3:32:30:a1:83:a1:be:c4:a2:b1:14:50: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:4F:F6:48:04:F9:0A:C8:52:16:72:52:CF:F0:A7:4A:A2:91:10 X509v3 Authority Key Identifier: keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/tjRP9kgE-QrIUhZyUs_wp0qikRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.201.176.0/20 IPv6: 2a02:2218::/29 Signature Algorithm: sha256WithRSAEncryption 30:f0:be:6c:d1:72:e2:ce:77:9e:e9:2e:93:ee:55:82:a9:cb: af:39:85:1c:6b:da:d9:25:ff:ac:5d:64:09:c6:37:d3:fe:48: 54:bb:3c:e2:f2:91:38:ba:88:da:8a:46:ae:8b:c3:8c:2f:fa: 36:09:62:df:64:96:19:74:e7:6b:92:84:0d:8a:a4:85:5f:96: 4b:7e:d9:64:4c:6c:0a:0f:53:2d:c0:aa:9b:3c:e6:82:7c:a0: 12:e0:ce:fb:25:cc:ba:c2:4a:8a:0d:4b:4c:58:7b:14:d2:7c: 59:72:a5:b6:18:50:33:b3:71:83:1b:23:93:6c:33:b0:f3:ca: b2:59:6e:3a:63:c3:18:3f:b2:0e:75:a7:a1:c7:ea:e3:92:e8: 14:c7:ca:5a:51:f8:91:e7:33:05:eb:23:81:20:3e:18:68:0f: 63:76:90:dc:2c:0a:06:45:36:bd:82:68:e2:ae:e5:f9:af:ea: ed:0a:c8:bd:6f:32:65:77:d2:21:a6:95:43:0e:da:0d:8d:6c: 50:7e:65:1e:b2:e0:3f:eb:09:14:b7:a6:6e:db:3f:47:6c:fd: 1c:a1:e3:12:fb:e9:fb:8f:ac:6e:e3:2e:6e:49:8f:38:58:b7: 71:ca:5d:b0:0d:03:de:ff:59:95:55:e3:b6:36:78:4a:2e:4b: 03:a6:ce:66 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NsinW04sQmQE6gUUF4gjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmNiMzVjM2Y1NmIyNzk4ZmY2MWJkNGQ5YTVjZWQwZWUw MzlmYjAwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM0NGZmNjQ4MDRmOTBhYzg1MjE2NzI1MmNmZjBhNzRhYTI5MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArobHcHSGVvObD8alMVeDGgkvgslp BbspOT6spHPj7tfcoZPf1+abrbLc5t0zn723IM0YVqEyKhhtP16e+tfnAnJB6KyZ gXo7lFQ7YQ9cd8z7st8yjR/vKEUxOG1Amr6rwIU6E7T8NnCmbxnAJRtJBOfECQru hlY1UNNPij81VB6AH6Bo8WmS8m0tW+BisA/iNFBqdfDZzNVmPrSVpYxzh/kTgnQZ B9X9aK/sGClK2TqgUqHHLqLP4ncHVUKVAwmov7BKp5JQF2zIhrtgNCsy+yfKh/1k e3LQMFmqK17pCuUgktCztc6MM0Q0k4PhsjKNqD/TMjChg6G+xKKxFFAkQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLY0T/ZIBPkKyFIWclLP8KdKopEQMB8GA1UdIwQY MBaAFCUss1w/VrJ5j/Yb1NmlztDuA5+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMt NTZjNmExMDMxZGJiLzEvdGpSUDlrZ0UtUXJJVWhaeVVzX3dwMHFpa1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMtNTZjNmExMDMxZGJi LzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUcmwMA0E AgACMAcDBQMqAiIYMA0GCSqGSIb3DQEBCwUAA4IBAQAw8L5s0XLiznee6S6T7lWC qcuvOYUca9rZJf+sXWQJxjfT/khUuzzi8pE4uojaikaui8OML/o2CWLfZJYZdOdr koQNiqSFX5ZLftlkTGwKD1MtwKqbPOaCfKAS4M77Jcy6wkqKDUtMWHsU0nxZcqW2 GFAzs3GDGyOTbDOw88qyWW46Y8MYP7IOdaehx+rjkugUx8paUfiR5zMF6yOBID4Y aA9jdpDcLAoGRTa9gmjiruX5r+rtCsi9bzJld9IhppVDDtoNjWxQfmUesuA/6wkU t6Zu2z9HbP0coeMS++n7j6xu4y5uSY84WLdxyl2wDQPe/1mVVeO2NnhKLksDps5m -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client